Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer
File: DA8CB35812CA1FA3A1BD6D3869385072793EC50E.cer (raw, json)
Hash identifier: AxVHNQ1VLu+JBc0EDrdLR9wu19qe7/v5PHeoANGE6mQ=
Subject key identifier: DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 5FFFF551ED5FB5E2A0549F8457297673066A6C6C
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 18 Mar 2025 15:28:50 +0000
Certificate not after: Tue 17 Mar 2026 15:33:50 +0000
Subordinate resources: IP: 2a0a:6044:bc00::/40
Validation: Failed, certificate revoked on Sun 25 May 2025 06:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ff:f5:51:ed:5f:b5:e2:a0:54:9f:84:57:29:76:73:06:6a:6c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Mar 18 15:28:50 2025 GMT
Not After : Mar 17 15:33:50 2026 GMT
Subject: CN=DA8CB35812CA1FA3A1BD6D3869385072793EC50E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:6b:c4:04:53:97:89:1f:80:f3:58:e5:54:
63:47:c2:ca:ff:1b:cf:a7:7f:a2:95:ac:85:3a:df:
3d:81:64:73:f3:d6:93:8d:03:12:f6:f0:85:fe:74:
d4:8a:fe:e9:75:29:16:fd:36:70:b2:7b:25:29:3f:
2e:fc:f7:19:4c:b5:9a:72:83:d5:71:2c:6a:61:da:
c1:b7:de:05:33:07:43:98:5a:63:84:47:17:11:61:
b9:63:7a:21:1e:3f:77:4e:f4:8b:f9:82:ed:b5:c1:
03:77:47:b1:e3:7f:e8:0e:ac:eb:d1:58:e7:0a:cd:
5e:e9:db:6f:4d:99:98:e0:36:88:e9:0a:83:ab:07:
b1:b9:2a:85:0e:ab:f3:8c:b5:1e:89:8f:0a:84:a0:
91:a7:9d:e9:b1:e2:5d:5c:eb:90:06:51:a0:7f:8b:
db:82:f9:dc:b0:c9:69:e3:28:10:04:e6:36:ca:c4:
83:28:84:7c:bf:62:56:75:0e:50:5b:fc:1e:64:5f:
52:ec:36:95:aa:5c:07:95:47:7c:01:a3:44:71:a4:
c0:a6:75:cb:a4:0e:5d:e5:70:df:1f:3b:5d:7e:b8:
14:e1:f6:11:bb:3c:9b:16:90:d6:57:29:82:4d:84:
5b:14:b1:69:95:48:36:74:8d:90:c5:e6:c5:5e:05:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DA:8C:B3:58:12:CA:1F:A3:A1:BD:6D:38:69:38:50:72:79:3E:C5:0E
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc8d19d0-d221-4448-811a-0e1611a46442/1/DA8CB35812CA1FA3A1BD6D3869385072793EC50E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:bc00::/40
Signature Algorithm: sha256WithRSAEncryption
6c:35:cf:3c:90:51:41:75:1a:05:12:1b:f4:5d:8c:b5:e7:d0:
87:1e:2d:0f:35:cc:f4:d9:67:6d:f1:2f:c8:e1:a2:13:87:5c:
3d:52:d8:10:51:72:19:4d:4d:05:64:de:ba:c2:11:f8:f4:5d:
5f:18:90:66:c7:f3:83:df:a8:b9:c4:21:31:d3:1d:53:ce:15:
5e:37:8f:89:d6:69:c5:45:bd:94:06:8d:83:00:db:40:28:50:
25:04:a4:5c:50:fe:3c:28:12:17:9b:3a:2f:94:d7:26:3c:82:
71:c1:86:21:c4:3d:22:cd:44:fe:4a:c0:18:95:b2:e6:4b:a4:
80:70:42:a2:be:66:45:61:23:2d:8d:af:b8:47:fa:fa:9a:97:
19:0b:4f:72:89:be:e8:50:81:94:70:05:c2:f3:9f:6e:ac:7c:
e9:a3:7e:b1:35:25:72:19:69:e5:58:18:b1:a1:32:cf:d0:78:
2d:9b:d3:87:95:6f:e5:7b:06:8b:b5:53:e9:55:59:fe:84:82:
ca:52:47:5d:80:64:42:c6:37:b1:bc:32:08:c3:ce:70:af:3a:
88:66:5b:56:8d:db:51:d7:d6:9d:3d:29:02:00:91:3b:0f:4d:
b8:bd:ef:07:86:92:b3:3f:2b:5c:cd:98:6e:55:e6:2b:fd:c3:
5f:4b:13:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 05:22:42 2025 by rpki-client